$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa File: ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa (raw, json) Hash identifier: T/Ht5q60PR0nx7XVtlXfhgEPR7qzp2IvCYeMiP0M7UE= Subject key identifier: 8B:37:40:9A:44:C2:FA:79:90:1E:6A:AC:8F:A7:CA:A1:10:97:8E:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BA56391D08522140F8E24FE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 396599 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:39:1d:08:52:21:40:f8:e2:4f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=1c5e5ec3-8178-419b-88f8-9e5941fd473a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:30:d5:05:d1:00:23:86:60:9a:a1:38:00:c1: 6a:f3:8e:4c:3e:23:fb:41:df:14:7e:2e:5d:b2:85: 44:38:77:05:f4:19:32:e9:1b:9e:0b:fe:e9:26:b7: 21:e6:9a:ba:e2:ef:ce:0b:df:b2:99:31:d2:d3:0b: 09:e1:71:7a:fa:9e:8a:54:df:a7:77:bb:93:94:6f: 49:44:08:c1:4f:03:46:c0:7e:12:1e:f2:0b:fc:72: 81:ae:2a:93:29:6f:8c:88:75:f4:91:1c:76:cb:34: 7b:be:30:d6:b2:81:fc:af:41:24:c8:5f:c3:89:af: 86:3a:18:16:94:b2:9c:44:d9:b9:23:f7:ef:e4:92: 24:ef:da:76:0e:20:bf:6d:34:05:e7:fc:62:fa:8d: f2:bf:f6:83:68:49:14:0d:68:5d:4e:8a:36:d7:47: 87:64:8f:5e:be:f1:f2:2b:62:74:e0:5f:c7:3b:ed: bc:b9:24:94:b4:91:e1:fb:48:8c:3e:b5:f2:c9:67: 14:49:ee:14:a0:e8:a2:d2:22:0b:ac:51:77:bc:1d: 75:83:a2:b5:cc:cf:07:39:3b:43:3b:85:48:72:95: ea:44:8e:81:fe:a5:2e:cf:6b:f4:6c:be:05:3b:b8: ab:46:45:42:0c:d8:56:a7:6e:63:f8:0a:79:8f:32: 78:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:37:40:9A:44:C2:FA:79:90:1E:6A:AC:8F:A7:CA:A1:10:97:8E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae99c67f-53a1-31d2-9896-08a6f9f458f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:a0:e1:e6:bc:7b:8a:5a:b7:70:da:5f:98:a2:05:30:df:ea: fb:30:72:9d:02:b4:56:13:7e:5b:44:2a:c6:78:39:24:93:1c: 7f:91:ab:e9:9a:89:d3:2b:aa:28:e3:69:0c:cb:22:c4:38:41: b1:3b:2f:6b:41:94:75:25:c7:a6:5d:09:fa:04:ff:49:9c:97: 9c:b7:5e:10:8a:2e:7e:98:9f:4e:f8:34:39:bb:66:a5:40:24: 18:cd:e7:21:ee:bc:74:15:64:ef:45:d1:65:c0:ab:f4:f1:9f: f0:e8:72:fa:04:0b:38:3a:87:68:73:4a:d6:63:58:8e:09:2d: 9b:bc:1d:ff:59:a2:cf:7c:c7:75:0d:3d:e3:d4:df:87:f0:60: 77:cc:6a:71:00:5d:b9:13:49:77:8a:54:99:b1:56:28:5d:29: 66:ce:bf:f6:41:64:53:49:6b:79:63:3d:a7:00:d7:ee:43:7d: 77:ba:ce:7f:27:2b:d6:65:d1:e8:a7:84:bf:5b:7b:d9:82:70: 04:be:6b:7d:8e:2a:f5:11:a5:3e:54:a0:3f:64:6a:e5:d8:74: 6b:1c:89:25:75:ad:ea:1f:3d:40:65:63:18:a1:9f:2c:7f:76: d9:e0:59:d7:a4:f9:d8:b8:00:61:83:86:f2:ec:93:33:44:f0: 0b:fc:e9:4a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjkdCFIhQPjiT+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk MWM1ZTVlYzMtODE3OC00MTliLTg4ZjgtOWU1OTQxZmQ0NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzDVBdEAI4ZgmqE4AMFq845MPiP7Qd8Ufi5d soVEOHcF9Bky6RueC/7pJrch5pq64u/OC9+ymTHS0wsJ4XF6+p6KVN+nd7uTlG9J RAjBTwNGwH4SHvIL/HKBriqTKW+MiHX0kRx2yzR7vjDWsoH8r0EkyF/Dia+GOhgW lLKcRNm5I/fv5JIk79p2DiC/bTQF5/xi+o3yv/aDaEkUDWhdToo210eHZI9evvHy K2J04F/HO+28uSSUtJHh+0iMPrXyyWcUSe4UoOii0iILrFF3vB11g6K1zM8HOTtD O4VIcpXqRI6B/qUuz2v0bL4FO7irRkVCDNhWp25j+Ap5jzJ4UQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIs3QJpEwvp5kB5qrI+nyqEQl44oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU5OWM2N2YtNTNhMS0z MWQyLTk4OTYtMDhhNmY5ZjQ1OGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC+oOHmvHuKWrdw2l+YogUw3+r7MHKdArRWE35b RCrGeDkkkxx/kavpmonTK6oo42kMyyLEOEGxOy9rQZR1JcemXQn6BP9JnJect14Q ii5+mJ9O+DQ5u2alQCQYzech7rx0FWTvRdFlwKv08Z/w6HL6BAs4Oodoc0rWY1iO CS2bvB3/WaLPfMd1DT3j1N+H8GB3zGpxAF25E0l3ilSZsVYoXSlmzr/2QWRTSWt5 Yz2nANfuQ313us5/JyvWZdHop4S/W3vZgnAEvmt9jir1EaU+VKA/ZGrl2HRrHIkl da3qHz1AZWMYoZ8sf3bZ4FnXpPnYuABhg4by7JMzRPAL/OlK -----END CERTIFICATE-----Generated at Wed Apr 16 14:06:57 2025 by rpki-client